Senior Information Security & GRC Leader

Bitpanda; Town of Vienna (WI); Hybride; USD 120 000 - 190 000; Plein temps

Avantages offerts par ce poste

Hybrid working model

Stock option plan

OpenUP coaching and wellbeing support

Udemy library access

3 extra days off in 2027

Résumé du poste

Bitpanda seeks an Information Security Senior Specialist to own and scale key GRC domains in a regulated fintech setting. You will drive cross‑functional risk assessments, lead audits from start to finish, and shape a resilient control program across critical vendors.

You will mentor peers, translate regulatory requirements into actionable work, and collaborate with engineering and operations to strengthen security across the organization.

Qualifications

• Minimum 6–10 years in information security GRC, audit/assurance, risk, or related roles.
• Proven track record leading audits and remediation across multiple teams.
• Strong knowledge of ISO 27001 and DORA; familiarity with SOC 2 / PCI DSS / NIST.
• Deep understanding of cloud, IAM, SDLC governance, incident management, vulnerability management, logging, and third‑party risk.

Responsabilités

• Own and scale GRC domains end‑to‑end, including ISMS operations and risk governance.
• Lead audits/assessments, readiness, walkthroughs, and remediation programs.
• Design risk‑based testing; translate regulatory requirements into internal programs.
• Set due diligence depth for critical suppliers and partner with legal on security contracts.
• Mentor team members; act as a GRC translator for engineering and operations.

Connaissances

Information Security

GRC

Audit & Assurance

Risk Management

Third-Party Risk

ISO 27001

DORA

SOC 2

PCI DSS

Cloud Security

IAM

SDLC Governance

Description du poste

Bitpanda seeks an Information Security Senior Specialist to own and scale key GRC domains in a regulated fintech setting. You will drive cross‑functional risk assessments, lead audits from start to finish, and shape a resilient control program across critical vendors.

You will mentor peers, translate regulatory requirements into actionable work, and collaborate with engineering and operations to strengthen security across the organization.